[Stephen]

what is the difference between FreeBSD's base OpenSSH and OpenSSH portable?

[myth]

OpenSSH Portable is basically the version for non-*bsd (net/free/open) systems like linux. When you install openssh onto a linux system, for example, OpenSSH Portable is actually installed.

When you install OpenSSH onto NetBSD, OpenBSD, FreeBSD (are there more ?) you install the OpenSSH for base FreeBSD.....


Why ? Well one of the reasons is, PAM. FreeBSD doesnt use PAM ... But Linux boxes do, so they get the portable version....

[Stephen]

the base install does support pam, but the question comes to mind because the portable version is also available in the ports tree of freeBSD

[myth]

the base install, from what i can now tell from a couple google searches, does not support PAM. I maybe interpretting wrong - but thats what i've gathered. And thats why you will find OpenSSH-Portable in the FreeBSD port tree

Correct me if i'm wrong, http://taosecurity.b...-freebsd-5.html

Quote

1. OpenSSH is part of the base FreeBSD operating system.
2. OpenSSH exists as the security/openssh port. This version is like OpenSSH for OpenBSD due to the similarity between FreeBSD and OpenBSD's code.
3. OpenSSH exists as the openssh-portable port. This version is specifically for non-OpenBSD systems.

Confused? According to this thread, OpenBSD's lack of support for PAM means the OpenBSD native version (option 2) doesn't offer PAM. Since FreeBSD does use PAM, options 1 and 3 make use of PAM.

This means that if you want your OpenSSH authentication to use PAM on FreeBSD, you can use the OpenSSH integrated into the FreeBSD base (like using integrated BIND) or you can install the openssh-portable port (like using the BIND port).

(Take note though, that website is dated October 2004 - things may have changed.)

[Stephen]

Quote

Confused? According to this thread, OpenBSD's lack of support for PAM means the OpenBSD native version (option 2) doesn't offer PAM. Since FreeBSD does use PAM, options 1 and 3 make use of PAM.

But thank you the rest of that did answer my question :)